Only the latest 2.x release receives security fixes.

Please do not open a public issue for security problems.

Report vulnerabilities privately through GitHub's private vulnerability reporting:

👉 https://github.com/coffee-and-fun/remove-pii/security/advisories/new

You can expect an initial response within 7 days. If you have not heard back in that time, feel free to follow up through the same channel.

When reporting, please include:

• A description of the issue and its impact.
• Steps or a minimal repro to reproduce.
• Any suggested fix, if you have one.

Thank you for helping keep the ecosystem safe.